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IN THE CLAIMS: 

I- 9. (Canceled) 

1 0. (Currently amended) A process for providing a security privilege for a method of 
a current thread that is currently executing in a run-time environment in a data processing 
system, the run-time environment having a stack comprising stack frames with stack 
frame pointers for associated methods, the process comprising the computer-implemented 
steps of: 

using a thread identifier of the current thread, locating a linked list; and 
searching the linked list for an entry having a stack frame pointer that matches the 
stack frame pointer of the method, wherein an entry of the linked list is a stack frame 
extension comprising security privilege information for the method . 

I I- (Previously presented) The process of claim 10, wherein the step of locating a 
linked list further comprises: 

locating the linked list within a stack frame shadow apparatus comprising a 
plurality of linked lists, each linked list of the plurality of linked lists heing associated 
with a thread. 

12. (Currently amended) The process of claim 1 0 wherein a the stack frame extension 
farther comprises the stack frame pointer of the method , privil e ge info r ma ti on, and 
validation information. 

1 3. (Currently amended) The process of claim 1 2 wherein the validation information 
comprises the name of the method, the signature of the method, of and the return address 
of the method. 

14. (Previously presented) The process of claim 10 further comprising: 

adding an entry to the linked list if no matching entries are found in response to a 
request to enable a privilege for the method. 
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15. (Currently amended) The proc e ss of claim 1 0 further comprising; A process for 
providing a privilege for a method of a current thread that is currently executing in a run- 
time environmen t in a data processing system, the run-time environment havine a stack 
comprising stack frames with stack frame pointers for associated methods, the process 
comprising the computer-implemented steps of: 

using a thread identifier of the current thread, locating a linked list : 

searching the linked list for an entry having a stack frame pointer that matches the 

stack frame pointer of the method, wherein an entry of the linked list is a stack frame 

extension: and 

removing a matching entry from the linked list if a matching entry is found in 
response to a request to revert a privilege for the method. 

16. (Currently amended) The process of claim 10 further ' comprising: A process for 
providing a privilege for a method of a current thread that is currently executing in a run- 
time environment in a data processing system, the run-time environment having a stack 
comprising stack frames with stack frame pointers for associated methods, the process 
comprising the computer-implemented steps of: 

using a thread identifier of the current thread, locating a linked list: 

searching the linked list for an entry having a stack frame pointer that matches the 

stack frame pointer of the method, wherein an entry of the linked list is a stack frame 

extension: and 

retrieving pri vilege information and validation information for a matching entry 
from the linked list if a matching entry is found in response to a request to retrieve 
privileges for the method. 

17. (Previously presented) A process for enabling and reverting a privilege for a 
method of a current thread that is currently executing in a run-time environment in a data 
processing system, the run-time environment having a stack comprising stack frames 
with stack frame pointers for associated methods, the process comprising the computer- 
implemented steps of: 
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storing privilege information in a stack frame shadow apparatus to enable a 
privilege for a method; 

querying a stack frame shadow apparatus for privilege information for a method; 

and 

deleting privilege information in a stack frame shadow apparatus to revert a 
privilege for a method. 

18. (Previously presented) A data structure on a computer-readable medium* for use in 
a data processing system, the data structure comprising: 

a set of $tack frame extensions, wherein a stack frame extension comprises: 

a pointer to a stack frame for a method; 

a data field for privilege data for the method; 

a data field for validation data for the method; and 
a linked list of stack frame extension entries, wherein the linked list is identifiable 
by a thread identifier. 

1 9. (Cuircntly amended) A data processing system for providing a security privilege 
for a method of a current thread that is currently executing in a run-time environment in 
the data processing system, the nin-time environment having a stack comprising stack 
frames with stack frame pointers for associated methods, the data processing system 
comprising: 

locating means for locating a linked list using a thread identifier of the current 
thread; and 

searching means for searching the linked list for an entry having a stack frame 
pointer that matches the stack frame pointer of the method, wherein an entry of the linked 
list is a stack frame extension comprising security privilege information for the method . 

20. (Previously presented) The data processing system of claim 1 9 further 
comprising: 

a stack frame shadow apparatus comprising a plurality of linked li sts, each linked 
list of the plurality of linked lists being associated with a thread. 
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21 . (Currently amended) The data processing system of claim 19 wherein a the stack 
frame extension further comprises the stack frame pointer of the method, privilege 
information, and validation information, 

22. (Currently amended) The data processing system of claim 21 wherein the 
validation information comprises the name of the method, the signature of the method, of 
and the return address of the method. 



23 . (Previously presented) The data processing system of claim 1 9 further 
comprising: 

adding means for adding an entry to the linked list if no m atching entries are 
found in response to a request to enable a privilege for the method. 

24. (Currently amended) The data proc e ssing s ystem of claim 19 further comprising: 
A data processing system for providing a privilege for a method of a current thread that is 
currently executing in a run-time environment in the data processing system, the nin-time 
environment having a stack comprising stack frames with stack frame pointers for 
associated methods, the data processing system comprising: 

locating means for locating a linked list using a thread identifier of the current 

thread; 

searching means for searching the linked list for an entry having a stack frame 
pointer th at matches the stack frame pointer of the method, wherein an entry of the linked 
list is a stack frame extension: and 

removing means for removing a matching entry from the linked list if a matching 
entry is found in response to a request to revert a privilege for the method. 

25. (Currently amended) ¥h e data pr o cessing oyotom of claim 19 furth e r comprising; 
A data processing syst em for providing a privilege for a method of a current thread that is 
currently executing i n a run-time environment in the data processing system, the run-time 
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environment having a stack comprising stack frames with stack frame pointers for 
associated methods* the data processing system comprising . 

locating mean s for locating a linked list using a thread identi fier of the current 

thread: 

searching me ans for searching the linked list for an entry having a slack frame 
pointer that matches the stack fra me pointer of the method, wherein an entry of the linked 
list is a stack frame extension: and 

retrieving means for retrieving privilege information and validation information 
for a matching entry from the linked list if a matching entry is found in response to a 
request to retrieve privileges for the method. 

26. (Currently amended) A computer program product for use in a data processing 
system for providing a security privilege for a method of a current thread that is currently 
executing in a run-time environment in the data processing system, the nin-time 
environment having a stack comprising stack frames with stack frame pointers for 
associated methods, the computer program product comprising: 

first instructions for locating a linked list using a thread identifier of the current 
thread; and 

second instructions for searching the linked list for an entry having a stack frame 
pointer that matches the stack frame pointer of the method, wherein an entry of the linked 
list is a stack frame extension comprising security privilege information for the method . 

27. (Newly added) The data structure of Claim 1 8, wherein the privilege data for the 
method is security privilege data for the method. 
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